Hugging Face
Models
Datasets
Spaces
Community
Docs
Enterprise
Pricing
Log In
Sign Up
Spaces:
khawir
/
cg-gen-ai
like
1
Paused
App
Files
Files
Community
2
Fetching metadata from the HF Docker repository...
47a388c
cg-gen-ai
/
models
5.91 GB
2 contributors
History:
1 commit
khawir
sdxl -> sd1.5
23549a1
over 1 year ago
image_encoder
sdxl -> sd1.5
over 1 year ago
ip-adapter-full-face_sd15.bin
Safe
pickle
Detected Pickle imports (3)
"torch._utils._rebuild_tensor_v2"
,
"torch.HalfStorage"
,
"collections.OrderedDict"
What is a pickle import?
43.6 MB
xet
sdxl -> sd1.5
over 1 year ago
ip-adapter-full-face_sd15.safetensors
Safe
43.6 MB
xet
sdxl -> sd1.5
over 1 year ago
ip-adapter-plus-face_sd15.bin
Safe
pickle
Detected Pickle imports (3)
"torch._utils._rebuild_tensor_v2"
,
"collections.OrderedDict"
,
"torch.HalfStorage"
What is a pickle import?
98.2 MB
xet
sdxl -> sd1.5
over 1 year ago
ip-adapter-plus-face_sd15.safetensors
Safe
98.2 MB
xet
sdxl -> sd1.5
over 1 year ago
ip-adapter-plus_sd15.bin
Safe
pickle
Detected Pickle imports (3)
"torch.HalfStorage"
,
"collections.OrderedDict"
,
"torch._utils._rebuild_tensor_v2"
What is a pickle import?
158 MB
xet
sdxl -> sd1.5
over 1 year ago
ip-adapter-plus_sd15.safetensors
Safe
98.2 MB
xet
sdxl -> sd1.5
over 1 year ago
ip-adapter_sd15.bin
Safe
pickle
Detected Pickle imports (3)
"torch._utils._rebuild_tensor_v2"
,
"torch.HalfStorage"
,
"collections.OrderedDict"
What is a pickle import?
44.6 MB
xet
sdxl -> sd1.5
over 1 year ago
ip-adapter_sd15.safetensors
Safe
44.6 MB
xet
sdxl -> sd1.5
over 1 year ago
ip-adapter_sd15_light.bin
Safe
pickle
Detected Pickle imports (3)
"collections.OrderedDict"
,
"torch._utils._rebuild_tensor_v2"
,
"torch.HalfStorage"
What is a pickle import?
44.6 MB
xet
sdxl -> sd1.5
over 1 year ago
ip-adapter_sd15_light.safetensors
Safe
44.6 MB
xet
sdxl -> sd1.5
over 1 year ago
ip-adapter_sd15_light_v11.bin
Safe
pickle
Detected Pickle imports (3)
"torch._utils._rebuild_tensor_v2"
,
"torch.HalfStorage"
,
"collections.OrderedDict"
What is a pickle import?
44.6 MB
xet
sdxl -> sd1.5
over 1 year ago
ip-adapter_sd15_vit-G.bin
Safe
pickle
Detected Pickle imports (3)
"torch.HalfStorage"
,
"collections.OrderedDict"
,
"torch._utils._rebuild_tensor_v2"
What is a pickle import?
46.2 MB
xet
sdxl -> sd1.5
over 1 year ago
ip-adapter_sd15_vit-G.safetensors
Safe
46.2 MB
xet
sdxl -> sd1.5
over 1 year ago
